K1000: What kind of permissions would be blocking my Windows patches from being deployed?

KACE is having problems trying to figure out why my Windows Patches are not being applied. They think it might have to do with permissions on the test workstation. I used the same smart label patching when I had the trial version and it worked fine. After we purchased K1000 and K2000, the same smart label patch does not work. We have not changed anything in between the trial and the purchase.

Comments

Answers

1

This may not solve your issue, but when I have quarky problems like that happen I create new patch schedules. Worst case I delete all of my patches, and redownload. There could have been an issue moving the DB over when moving from a trial.

What exactly is happening and do you have a kpatch.log in debug mode to see what is or is not happening? I would also try to test a single patch on a single machine to see if it patches. That way you will know at least know more.

We did try just a single patch and they did look at the kpatch.log file. They could not make anything out of it except that there might be some permission issue with writing to the registry. But, like I mentioned before, we have not changed anything. Especially permission wise.

create a GPO and turn off the firewall. put one machine in there and run a patch schedule for one patch it needs if it works then you know it's FW. If it doesn't you also know it wasn't the FW. It runs as local system so there are no permissions issues as it runs as local admin.

We have the firewall turned off at the workstations. Dell KACE is telling me that the mcescan.exe file does not run on our workstations and it does not let it write to the registry. It can run on my workstation.